Extreme lag after added a disk to the machine


Recommended Posts

2 minutes ago, John_M said:

 

Did either of those cure the problem? A more logical approach would be to wait until the problem is happening and then grab your diagnostics zip and post here.

No, it is the video lagging so much, it lag almost every 3 seconds

And i have a Minecraft server on another vm(not on atm), the tps of the server is constantly dropping, which didn't happen before

Edited by TheBlueKingLP
Link to comment

It looks as though your server is being attacked with ssh connection attempts from a number of public IP addresses. I recommend you get it hidden behind a firewall as soon as possible and close all ports.

 

Here's just one example of many:

Aug 19 23:04:58 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:04:59 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: error: maximum authentication attempts exceeded for root from 58.218.92.40 port 29106 ssh2 [preauth]

Do you recognise the address? It's whois record confirms that it's held by Chinanet.

Link to comment
3 minutes ago, John_M said:

It looks as though your server is being attacked with ssh connection attempts from a number of public IP addresses. I recommend you get it hidden behind a firewall as soon as possible and close all ports.

 

Here's just one example of many:


Aug 19 23:04:58 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:04:59 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2
Aug 19 23:05:01 Pegasus sshd[1655]: error: maximum authentication attempts exceeded for root from 58.218.92.40 port 29106 ssh2 [preauth]

Do you recognise the address? It's whois record confirms that it's held by Chinanet.

I notice those when i just look at the diagnostic file too, thanks for the remind

Link to comment
8 minutes ago, John_M said:

I recommend you get it hidden behind a firewall as soon as possible and close all ports.

Seriously. Why is your server on the internet? Do you not know about bots? There are lots of totally automated things out there to attack your server repeatedly and relentlessly if you put it on the internet.

Link to comment
40 minutes ago, trurl said:

Seriously. Why is your server on the internet? Do you not know about bots? There are lots of totally automated things out there to attack your server repeatedly and relentlessly if you put it on the internet.

I know the are bots, but i need to access the server without a vpn or proxy.

I want to solve the lag problem first

Edited by TheBlueKingLP
Link to comment
1 hour ago, TheBlueKingLP said:

I know the are bots, but i need to access the server without a vpn or proxy.

 

This statement doesn't make sense. Exactly why do you need that? Note that "need" and "want" aren't compatible words, and bad things tends to happen when "want" gets upgraded to "need".

Link to comment
2 hours ago, TheBlueKingLP said:

Anyone can help me to solve this?

 

I tried but your syslog is very difficult to read because of all the noise. Apart from the messages about the outside attacks, you have "bad csrf token" messages (close all stale browser windows) and the usual messages from the broken preclear plugin.

Link to comment
5 hours ago, Squid said:

Looks like you're running a Windows 2016 Server VM, a Windows 10 VM, and you don't have a cache drive, have all 1TB drives (which aren't exactly speed demons), and are hosting the vdisks on the array.  Slow and lagging is basically what I would expect

Why do I don't have this problem before I add the 6th drive to the system? It happen right after I just plug the drive in and start pre clear.

Link to comment
3 minutes ago, TheBlueKingLP said:

Why do I don't have this problem before I add the 6th drive to the system? It happen right after I just plug the drive in and start pre clear.

Does the problem go away if you remove the disk? You would have to New Config and rebuild parity without it if it is already part of the array.

Link to comment
10 minutes ago, TheBlueKingLP said:

It happen BEFORE I added it to the array (After I plug it in)

 

OK, but I am asking if the problem goes away if you unplug the disk. But if the disk is now part of the array, in order to unplug the disk and not incur further performance degradation caused by emulating a missing disk, you would have to New Config and rebuild parity without the disk, then see if it performed like before.

Link to comment
21 minutes ago, trurl said:

 

OK, but I am asking if the problem goes away if you unplug the disk. But if the disk is now part of the array, in order to unplug the disk and not incur further performance degradation caused by emulating a missing disk, you would have to New Config and rebuild parity without the disk, then see if it performed like before.

How do I remove a disk that has data on it?

And I have another Linux VM running on a unassigned drive and it is lagging too.

Edited by TheBlueKingLP
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.